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IN THE CLATMS: 

1 . (Currently amended) A method in a data processing system for executing 
cryptographic operations, the method comprising: 

responsive to a request to perform a cryptographic operation, dynamically 
selecting between one of a software process and a hardware process within the data 
processing system for performing the cryptographic operation based on a policy, to form 
a selected process; and 

performing the cryptographic operation using the selected process, wherein the 
cryptographic operati on is an encryption of data using a key, and wherein the step of 
performing the cryptographic operation includes converting the key to a form useable by 
the selected process if the key is in an unusable form by the selected proces s^ wherein the 
key is a software key and th e selected process is the hardware process and the step of 
converting the ke y comprises converting the software key into a hardware foiro useable 
bv the hardware proce ss for performing the cryptographic operation . 

2. (Original) The method of claim 1 , wherein the policy includes selecting the one 
based on available resources to perform the cryptographic operation. 

3. (Original) The method of claim 1, wherein the policy includes selecting the one 
resulting in a fastest completion of the cryptographic operation. 

4. (Original) The method of claim 1 , wherein the selecting step includes: 
selecting the one using a preference associated with the request. 

5-7. (Cancelled) 

8. (Previously presented) A method in a data processing system for executing 
cryptographic operations;, the method comprising: 

responsive to a request to perform a cryptographic operation, dynamically 
selecting between one of a software process and a hardware process within the data 
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processing system for performing the cryptographic operation based on a policy, to form 
a selected process; and 

performing the cryptographic operation using the selected process, wherein the 
cryptographic operation is an encryption of data using a key, wherein the key is a 
hardware key and the selected process is the software process and further comprising: 

converting the hardware key into a software form useable by the software process 
for performing the cryptographic operation. 

9. (Currently amended) The method of claim 4 8, wherein the policy comprises a 
set of rules used to minimize available resources consumed in performing the 
cryptographic operation. 

1 0. (Currently amended) The method of claim 4 8, wherein the policy comprises a 
set of rules used to maximize a speed at which the cryptographic operation is performed. 

11. (Cancelled) 

12. (Currently amended) The method of claim 4+8, wherein the cryptographic 
operation is one of a message digest and a public-private key encryption. 

13. (Currently amended) The method of claim 44 wherein the request is received 
from an application. 

14. (Original) The method of claim 1 3, wherein the request is received from the 
application using an application program interface call made by the application. 

1 5*1 8. (Cancelled) 

19. (Currently amended) The method of claim 44 2, wherein the available resources 
include available processing resources and memory. 
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20-25. (Cancelled) 

26. (Currently amended) A data processing system for executing cryptographic 
operations, the data processing system comprising: 

selecting means for dynamically selecting between one of a software process and 
a hardware process within the data processing system for performing a cryptographic 
operation based on a policy, to form a selected process in response to a request to 
perform the cryptographic operation; and 

performing means for performing the cryptographic operation using the selected 
process, wherein the cryptographic operation is an encryption of data using a key, and 
wherein the performing means includes converting means for converting the key to a 
form useable by the selected process if the key is in an unusable form by the selected 
proces s, wherein the key is a software key and the selected process is the hardware 
process a nd the converting means comprises means for converting the software key into a 
hardware form useable bv the hardware process for performing the cryptographic 
operation , 

27. (Original) The data processing system of claim 26, wherein the policy includes 
selecting the one based on available resources to perform the cryptographic operation. 

28. (Original) The data processing system of claim 26, wherein the policy includes 
selecting the one resulting in a fastest completion of the cryptographic operation. 

29. (Original) The data processing system of claim 26 3 wherein the selecting means 
includes: 

selecting means for selecting the one using a preference associated with the 
request. 

30-32. (Cancelled) 
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33. (Currently amended) Tho data prooogoing ovatom of claim 26 A data processing 
system for executing cryptographic operations, the data processing system comprising: 

selecting means for dynamically selecting between one of a sofhvarejpnpcess and 
a hardware process within the data processing system for^erfbrming a cryptographic 
operation based on a policy, to form a selected process in response to a request to 
perform the cryptographic operation: and 

performing means for performing the cryptographic operation using the selected 
process, wherein the cryptographic operation is an encryption of data using a key, and 
wherein the performing means includes converting means for converting the key to a 
form useab_le_by the selected process if the key is in ,an_unusabIe_forrn by_ the selected 
process, wherein the key is a hardware key and the selected process is the software 
process and farther comprising; the converting means comprises means for converting 
the hardware key into a software form useable by the software process for performing the 
cryptographic operation. 

34. (Currently amended) The data processing system of claim 3$ wherein the 
policy comprises a set of rules used to minimize available resources consumed in 
performing the cryptographic operation. 

35. (Currently amended) The data processing system of claim 36 21, wherein the 
policy comprises a set of rules used to maximize a speed at which the cryptographic 
operation is performed. 



36. (Cancelled) 

37. (Currently amended) The data processing system of claim 16 33, wherein the 
cryptographic operation is one of a message digest and a public-private key encryption. 

38. (Currently amended) The data processing system of claim 36 33, wherein the 
request is received from an application. 
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39. (Original) The data processing system of claim 38, wherein the request is 
received from the application using an application program interface call made by the 
application. 

40-41. (Cancelled) 

42. (Currently amended) Tho data prooQgoing - gygtem - of claim 36, wher e in - th e k e y i s 
a hardware key and thc o e lect e d process is the ooftwaro procogg and farth e r - comprising: 

converting moans for A data processing system comprising; 
a bus system; 

a_communications unit connected to the bus, wherein data is sent andjt^eived 
using the communications unit; 

a memory connected t o the bus system, wherein a set of instructions are located in 
the memory; and 

a.orocessor unit connected to the bus system, wherein the processor unit executes 
the set of instru ctions to fit dynamically select between one of a software process and a 
hardware pro cess within the data_processing system for performing a cryptographic 
operation based on a policy, to form a selected process; ( ii) perform the cryptographic 
operation using t he selected process, wherein the cryptographic operation is an 
encryption of dat a using a key, wherein the key is a hardware key and the selected 
process is t he software process: and fiift converting the hardware key into a software 
form useable by the software process for performing the cryptographic operation. 

43. (Currently amended) 3 3i e data processing oyotcm of olaim 36, vvhoroin the key is 
a softwaro key and tho flolcct e d process io tho hardware prooooa and furth e r comprisin g? 

converting mcans -fe* A data processing system comprising: 
a bus system: 

a communications u nit connected to the bus, wherein data is sent and received 
using the communications unit: 

a memory connected to the bus system, wherein a set of instructions are located in 
the memory: and 
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a processor unit connected to the bus system, wherein the processor unit executes 
th_e_$_et of instructions to (\) dynamically select between one of a software process and a 
hardware process within the data_processing system for performing a cryptographic 
operation based on a ^policy, to form a selected proc^_$_;_QiIperform the cryptographic 
operation using the sel ected process, wherein the cryptographic operation is an 
encryption of data using a kev. wherein the key is a software key and the selected process 
is the hardware process: and fiii) converting the software key into a hardware form 
useable by the hardware process for performing the cryptographic operation. 

44-46. (Cancelled) 
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